Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Kenya: ODPC fines Whitepath KES 5M for non compliance with enforcement notice concerning unlawful direct marketing
The Office of the Data Protection Commission ('ODPC') announced, on 11 April 2023, via Twitter, its decision to issue a penalty notice of KES 5 million (approx. €33,800) against Whitepath company limited, a digital lending company, for failure to comply with an enforcement notice issued by the ODPC against it, following complaints.
Background to the case
In particular, the ODPC stated that it had received around 150 complaints against Whitepath alleging that the company's applications accessed the complainants' mobile phone contacts and sent unsolicited messages to the same. In this regard, the ODPC noted that it had previously issued an enforcement notice, on 10 January 2023, against Whitepath, which the company had failed to comply with.
Findings of the ODPC
As such, the ODPC found that Whitepath had failed to comply with its enforcement notice after its violation of data protection laws.
Outcomes
Accordingly, the ODPC issued the aforementioned fine against Whitepath and noted that the Data Commissioner, Immaculate Kassait, urges businesses to protect personal data by design and by default, and cooperate with the ODPC to avoid penalties.
You can read the announcement here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
